Static task
static1
Behavioral task
behavioral1
Sample
c7306b248145eb4d8fcfcdec1b112a9b90bd7228302687315af98ea78bac3447.exe
Resource
win7-20220414-en
General
-
Target
c7306b248145eb4d8fcfcdec1b112a9b90bd7228302687315af98ea78bac3447
-
Size
3.9MB
-
MD5
9596e5149c229c48e0e3475563b1ed82
-
SHA1
7a602d3638e83a358a804176c7d2b85aa52fc640
-
SHA256
c7306b248145eb4d8fcfcdec1b112a9b90bd7228302687315af98ea78bac3447
-
SHA512
3921dd5a18247a79ee948c56487ad02ec599a2f0a5f75904e66d35728bed9f0d40d5120a35b55f2887c6fa4f2705d85534b530f53627f325805cb51989a0078e
-
SSDEEP
98304:t9N6AdricNpi5QQ6/RRT6BrqpnqJdm/9xyFQSEf5thtaQhnKyW08Ve:LFle+wBrqR6dsbyFQSEBEUKJ08Ve
Malware Config
Signatures
Files
-
c7306b248145eb4d8fcfcdec1b112a9b90bd7228302687315af98ea78bac3447.exe windows x86
538e3eb30061d3fa9449396524623f50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommModemStatus
HeapCompact
GetNativeSystemInfo
lstrlenA
CopyFileExW
AllocConsole
BuildCommDCBAndTimeoutsA
UpdateResourceA
SetWaitableTimer
SetConsoleTextAttribute
ZombifyActCtx
GetEnvironmentStringsW
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
IsBadReadPtr
WriteFile
QueryActCtxW
GlobalAlloc
GetVolumeInformationA
LoadLibraryW
SetDefaultCommConfigA
WriteConsoleOutputA
ReadFile
GetModuleFileNameW
CreateActCtxA
GetDevicePowerState
VirtualUnlock
GetStringTypeExA
GetCPInfoExW
InterlockedFlushSList
GetProcAddress
AttachConsole
HeapUnlock
SetConsoleCtrlHandler
HeapLock
SetSystemTime
LoadLibraryExA
GetConsoleTitleW
DeleteCriticalSection
FindAtomW
lstrcpyA
GetCalendarInfoA
PulseEvent
GetCommandLineA
HeapSetInformation
GetStartupInfoW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
RaiseException
FatalAppExitA
CloseHandle
CreateFileA
FreeLibrary
InterlockedExchange
GetLocaleInfoW
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
FlushFileBuffers
SetEndOfFile
GetProcessHeap
HeapSize
CreateFileW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
gdi32
GetCharWidth32W
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 46.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cocayi Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pesub Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nin Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.himada Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ